
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
File: 7dd319be-2876-403e-ba86-24d27aaa8fc0.cer (raw, json)
Hash identifier: 5N3k/gUAo+SiKcB6b+ugghT25lUJCftqhbPrGUkTcQY=
Subject key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584F1E25776A1307A06DD96AC400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 09 Sep 2026 12:45:11 +0000
Certificate not after: Tue 12 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 6651
IP: 162.217.116.0/22
IP: 2602:f4e5::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1e:25:77:6a:13:07:a0:6d:d9:6a:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Sep 9 12:45:11 2026 GMT
Not After : Dec 12 13:45:11 2028 GMT
Subject: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:36:43:ed:9a:db:3d:cf:32:16:54:b6:ed:
94:d8:dc:15:d9:cc:98:e0:44:f6:c2:bb:14:c0:38:
33:ec:36:f9:32:c0:60:f0:b9:91:bd:d2:09:40:11:
82:ce:fd:7c:05:63:8f:87:eb:1e:21:0b:ac:1c:b3:
40:a0:96:0d:d5:53:9c:b8:64:91:56:9c:c5:a6:ea:
ef:75:0d:f5:13:1d:ff:5a:06:dd:11:ab:f4:af:67:
91:33:59:8f:1b:c3:e4:61:e0:94:bf:fa:3d:7a:c8:
eb:d7:b2:61:41:9b:34:43:9c:13:d4:cc:fc:84:94:
b8:98:33:b9:b4:50:47:e9:bc:2a:68:68:e1:63:2e:
64:80:24:9e:bc:26:53:4d:0f:be:b7:3a:79:05:40:
e0:59:4d:58:ef:fa:e9:f4:95:73:e1:32:6c:21:5b:
38:f7:04:84:54:ea:6c:bc:ac:bf:01:3a:0f:1f:b6:
1b:48:dd:ed:30:69:33:b0:8d:e5:cd:39:bb:c5:29:
e0:4d:8c:55:82:a0:4e:e1:1d:71:53:17:12:3d:58:
eb:1b:ef:f3:da:2d:11:5a:bd:be:a7:52:a1:85:25:
f9:d3:38:62:c9:43:f2:fe:27:07:96:cc:67:5b:29:
84:9c:0d:22:a3:7c:bd:7a:71:27:8e:4a:f6:7e:70:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
162.217.116.0/22
IPv6:
2602:f4e5::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6651
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:54:aa:c2:ad:59:d7:8d:6b:17:3b:95:44:38:67:9b:c1:3e:
b6:97:03:75:84:a3:ef:25:64:df:a7:11:cb:a3:c6:df:aa:0c:
e9:dd:43:e9:a5:b1:a0:47:b4:02:b0:1d:7e:a5:dd:8d:98:04:
08:02:f8:71:d8:97:b9:20:d9:1a:6d:c0:e1:a2:5e:b4:1c:18:
ef:58:18:71:94:ae:5b:54:63:67:79:3f:41:81:76:e3:e7:16:
15:3d:73:40:df:3f:5c:e7:d5:ef:63:1a:00:1d:66:2f:b2:0c:
46:79:59:78:b4:7d:12:13:66:fe:b6:fd:1e:5d:38:97:60:22:
7d:9f:cd:f1:33:79:95:c7:05:4d:95:61:94:c3:8b:d8:0c:77:
92:76:8b:a2:a7:51:36:94:a0:b3:f4:29:19:9a:d8:ce:78:a0:
26:f3:fd:51:80:1b:10:7b:25:2d:b4:fc:45:3e:13:10:19:a4:
99:eb:69:4e:6a:85:1c:5f:94:a9:d8:3d:b4:31:30:60:c7:9a:
21:e3:17:6d:d1:d2:27:41:97:a6:5d:48:6f:c1:25:0d:de:b3:
9a:9f:56:dc:b0:50:27:e5:1e:2c:c6:c2:58:b5:9e:3e:4b:80:
3a:5d:13:e4:b7:ff:39:22:0b:41:66:ef:cb:3b:35:46:49:f9:
37:b0:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:52 2026 by rpki-client